From: Jeremy Allison Date: Sat, 14 Nov 1998 03:13:08 +0000 (+0000) Subject: Updated from smb.conf.5.html X-Git-Tag: samba-2.2.5pre1~5058 X-Git-Url: http://git.samba.org/?p=samba.git;a=commitdiff_plain;h=6f37d151d87d7ab4475ef552abb9183464203093 Updated from smb.conf.5.html Jeremy. --- diff --git a/swat/help/smb.conf.5.html b/swat/help/smb.conf.5.html index f9d1bc5c84f..a0c1eb82b36 100644 --- a/swat/help/smb.conf.5.html +++ b/swat/help/smb.conf.5.html @@ -3,7 +3,7 @@ -smb.conf +smb.conf (5) @@ -11,7 +11,7 @@
-

smb.conf

+

smb.conf (5)

Samba

23 Oct 1998

@@ -81,7 +81,7 @@ them. The client provides the username. As older clients only provide passwords and not usernames, you may specify a list of usernames to check against the password using the "user=" option in the share definition. For modern clients such as Windows 95/98 and -Windows NT, this should not be neccessary. +Windows NT, this should not be necessary.


Note that the access rights granted by the server are masked by the access rights granted to the specified or guest UNIX user by the host system. The server does not grant more access than the host system @@ -94,7 +94,7 @@ the share name "foo": [foo] path = /home/bar - writable = true + writeable = true @@ -159,7 +159,7 @@ following is a typical and suitable [homes] section: 


 
  	[homes]
- 		writable = yes
+ 		writeable = yes
@@ -197,14 +197,14 @@ given, the username is set to the located printer name.



Note that the [printers] service MUST be printable - if you specify otherwise, the server will refuse to load the configuration file. -


Typically the path specified would be that of a world-writable spool +


Typically the path specified would be that of a world-writeable spool directory with the sticky bit set on it. A typical [printers] entry would look like this: 


 
  	[printers]
  		path = /usr/spool/public
- 		writable = no
+ 		writeable = no
  		guest ok = yes
  		printable = yes 
 
@@ -221,7 +221,7 @@ this:
 
 

Each alias should be an acceptable printer name for your printing
 subsystem. In the [global] section, specify the new
-file as your printcap.  The server will then only recognise names
+file as your printcap.  The server will then only recognize names
 found in your pseudo-printcap, which of course can contain whatever
 aliases you like. The same technique could be used simply to limit
 access to a subset of your local printers.
@@ -233,15 +233,15 @@ of a printcap record. Records are separated by newlines, components
 defined on the system you may be able to use "printcap name =
 lpstat" to automatically obtain a list of
 printers. See the "printcap name" option for
-more detils.
+more details.
 


 


 
PARAMETERS

     
 

Parameters define the specific attributes of sections.
 

Some parameters are specific to the [global] section
-(eg., security).  Some parameters are usable in
-all sections (eg., create mode). All others are
+(e.g., security).  Some parameters are usable in
+all sections (e.g., create mode). All others are
 permissible only in normal sections. For the purposes of the following
 descriptions the [homes] and
 [printers] sections will be considered normal.
@@ -250,7 +250,7 @@ specific to the [global] s
 indicates that a parameter can be specified in a service specific
 section. Note that all 'S' parameters can also be specified in the
 [global] section - in which case they will define
-the default behaviour for all services.
+the default behavior for all services.
 

Parameters are arranged here in alphabetical order - this may not
 create best bedfellows, but at least you can find them! Where there
 are synonyms, the preferred synonym is described, others refer to the
@@ -308,8 +308,8 @@ negotiation. It can be one of CORE, COREPLUS, LANMAN1, LANMAN2 or NT1.
 
  •  %d = The process id of the current server process.
 

     
 
  •  %a = the architecture of the remote
-machine. Only some are recognised, and those may not be 100%
-reliable. It currently recognises Samba, WfWg, WinNT and
+machine. Only some are recognized, and those may not be 100%
+reliable. It currently recognizes Samba, WfWg, WinNT and
 Win95. Anything else will be known as "UNKNOWN". If it gets it wrong
 then sending a level 3 log to samba-bugs@samba.anu.edu.au
 should allow it to be fixed.
@@ -717,7 +717,7 @@ regardless if the owner of the file is the currently logged on user or not.
 

    This specifies what type of server nmbd will
 announce itself as, to a network neighborhood browse list. By default
 this is set to Windows NT. The valid options are : "NT", "Win95" or
-"WfW" meaining Windows NT, Windows 95 and Windows for Workgroups
+"WfW" meaning Windows NT, Windows 95 and Windows for Workgroups
 respectively. Do not change this parameter unless you have a specific
 need to stop Samba appearing as an NT server as this may prevent Samba
 servers from participating as browser servers correctly.
@@ -784,7 +784,7 @@ the interface list given in the 'in
 parameter. This restricts the networks that smbd
 will serve to packets coming in those interfaces.  Note that you
 should not use this parameter for machines that are serving PPP or
-other intermittant or non-broadcast network interfaces as it will not
+other intermittent or non-broadcast network interfaces as it will not
 cope with non-permanent interfaces.
 

    In addition, to change a users SMB password, the
 smbpasswd by default connects to the
@@ -820,13 +820,8 @@ request immediately if the lock range cannot be obtained.
 

    Example:
 	blocking locks = False
 

    
-
  • broweable (S)
-

    This controls whether this share is seen in the list of available
-shares in a net view and in the browse list.
-

    Default:
-	browsable = Yes
-

    Example:
-	browsable = No
+
  • browseable (S)
+

    Synonym for browseable.
 

    
 
  • browse list(G)
 

    This controls whether smbd will serve a browse
@@ -836,7 +831,12 @@ should never need to change this.
 	browse list = Yes
 

    
 
  • browseable
-

    Synonym for browsable.
+

    This controls whether this share is seen in the list of available
+shares in a net view and in the browse list.
+

    Default:
+	browseable = Yes
+

    Example:
+	browseable = No
 

    
 
  • case sensitive (G)
 

    See the discussion in the section NAME MANGLING.
@@ -907,7 +907,7 @@ described more fully in the manual page , tell smbd how
 to map lower to upper case characters to provide the case insensitivity
 of filenames that Windows clients expect.
-

    Samba currenly ships with the following code page files :
+

    Samba currently ships with the following code page files :
 

      
 

    •  Code Page 437 - MS-DOS Latin US
 

    •  Code Page 737 - Windows '95 Greek
@@ -960,10 +960,10 @@ codes.
 Shift-JIS to JUNET code with different shift-in, shift out codes.
 

    •  EUC  Convert an incoming Shift-JIS character to EUC code.
 

    •  HEX Convert an incoming Shift-JIS character to a 3 byte hex
-representation, ie. :AB.
+representation, i.e. :AB.
 

    •  CAP Convert an incoming Shift-JIS character to the 3 byte hex
-representation used by the Columbia Appletalk Program (CAP),
-ie. :AB.  This is used for compatibility between Samba and CAP.
+representation used by the Columbia AppleTalk Program (CAP),
+i.e. :AB.  This is used for compatibility between Samba and CAP.
 

    
 

    
 
  • comment (S)
@@ -1005,7 +1005,7 @@ in the configuration file than the service doing the copying.
 

    
 
  • create mask (S)
 

    A synonym for this parameter is 'create mode'.
-

    When a file is created, the neccessary permissions are calculated
+

    When a file is created, the necessary permissions are calculated
 according to the mapping from DOS modes to UNIX permissions, and the
 resulting UNIX mode is then bit-wise 'AND'ed with this parameter.
 This parameter may be thought of as a bit-wise MASK for the UNIX modes
@@ -1123,7 +1123,7 @@ you want.
 delete any files and directories within the vetoed directory. This can
 be useful for integration with file serving systems such as NetAtalk,
 which create meta-files within directories you might normally veto
-DOS/Windows users from seeing (eg. .AppleDouble)
+DOS/Windows users from seeing (e.g. .AppleDouble)
 

    Setting 'delete veto files = True' allows these directories to be 
 transparently deleted when the parent directory is deleted (so long
 as the user has permissions to do so).
@@ -1161,7 +1161,7 @@ second should be the number of available blocks. An optional third
 return value can give the block size in bytes. The default blocksize
 is 1024 bytes.
 

    Note: Your script should NOT be setuid or setgid and should be
-owned by (and writable only by) root!
+owned by (and writeable only by) root!
 

    Default:
 	By default internal routines for determining the disk capacity
 and remaining space will be used.
@@ -1192,7 +1192,7 @@ path names on some systems.
 
  • directory mask (S)
 

    This parameter is the octal modes which are used when converting DOS
 modes to UNIX modes when creating UNIX directories.
-

    When a directory is created, the neccessary permissions are calculated
+

    When a directory is created, the necessary permissions are calculated
 according to the mapping from DOS modes to UNIX permissions, and the
 resulting UNIX mode is then bit-wise 'AND'ed with this parameter.
 This parameter may be thought of as a bit-wise MASK for the UNIX modes
@@ -1203,7 +1203,7 @@ write bits from the UNIX mode, allowing only the user who owns the
 directory to modify it.
 

    Following this Samba will bit-wise 'OR' the UNIX mode created from
 this parameter with the value of the "force directory mode"
-parameter. This parameter is set to 000 by default (ie. no extra mode
+parameter. This parameter is set to 000 by default (i.e. no extra mode
 bits are added).
 

    See the "force directory mode" parameter
 to cause particular mode bits to always be set on created directories.
@@ -1236,7 +1236,7 @@ DNS name lookup requests, as doing a name lookup is a blocking action.
 

    This is an EXPERIMENTAL parameter that is part of the unfinished
 Samba NT Domain Controller Code. It may be removed in a later release.
 To work with the latest code builds that may have more support for
-Samba NT Domain Controller functionality please subscibe to the
+Samba NT Domain Controller functionality please subscribe to the
 mailing list Samba-ntdom available by sending email to
 listproc@samba.anu.edu.au
 

     
@@ -1244,7 +1244,7 @@ mailing list Samba-ntdom available by sending email to
 

    This is an EXPERIMENTAL parameter that is part of the unfinished
 Samba NT Domain Controller Code. It may be removed in a later release.
 To work with the latest code builds that may have more support for
-Samba NT Domain Controller functionality please subscibe to the
+Samba NT Domain Controller functionality please subscribe to the
 mailing list Samba-ntdom available by sending email to
 listproc@samba.anu.edu.au
 

    
@@ -1257,7 +1257,7 @@ files. It is left behind for compatibility reasons.
 

    This is an EXPERIMENTAL parameter that is part of the unfinished
 Samba NT Domain Controller Code. It may be removed in a later release.
 To work with the latest code builds that may have more support for
-Samba NT Domain Controller functionality please subscibe to the
+Samba NT Domain Controller functionality please subscribe to the
 mailing list Samba-ntdom available by sending email to
 listproc@samba.anu.edu.au
 

    
@@ -1265,7 +1265,7 @@ mailing list Samba-ntdom available by sending email to
 

    This is an EXPERIMENTAL parameter that is part of the unfinished
 Samba NT Domain Controller Code. It may be removed in a later release.
 To work with the latest code builds that may have more support for
-Samba NT Domain Controller functionality please subscibe to the
+Samba NT Domain Controller functionality please subscribe to the
 mailing list Samba-ntdom available by sending email to
 listproc@samba.anu.edu.au
 

    
@@ -1273,7 +1273,7 @@ mailing list Samba-ntdom available by sending email to
 

    This is an EXPERIMENTAL parameter that is part of the unfinished
 Samba NT Domain Controller Code. It may be removed in a later release.
 To work with the latest code builds that may have more support for
-Samba NT Domain Controller functionality please subscibe to the
+Samba NT Domain Controller functionality please subscribe to the
 mailing list Samba-ntdom available by sending email to
 listproc@samba.anu.edu.au
 

    
@@ -1284,7 +1284,7 @@ details on setting up this feature see the file DOMAINS.txt in the
 Samba documentation directory docs/ shipped with the source code.
 

    Note that Win95/98 Domain logons are NOT the same as Windows
 NT Domain logons. NT Domain logons require a Primary Domain Controller
-(PDC) for the Domain. It is inteded that in a future release Samba
+(PDC) for the Domain. It is intended that in a future release Samba
 will be able to provide this functionality for Windows NT clients
 also.
 

    Default:
@@ -1292,7 +1292,7 @@ also.
 

    
 
  • domain master (G)
 

    Tell nmbd to enable WAN-wide browse list
-collation.Setting this option causes nmbd to
+collation. Setting this option causes nmbd to
 claim a special domain specific NetBIOS name that identifies it as a
 domain master browser for its given
 workgroup. Local master browsers in the same
@@ -1305,7 +1305,7 @@ list, instead of just the list for their broadcast-isolated subnet.
 

    Note that Windows NT Primary Domain Controllers expect to be able to
 claim this workgroup specific special NetBIOS
 name that identifies them as domain master browsers for that
-workgroup by default (ie. there is no way to
+workgroup by default (i.e. there is no way to
 prevent a Windows NT PDC from attempting to do this). This means that
 if this parameter is set and nmbd claims the
 special name for a workgroup before a Windows NT
@@ -1315,7 +1315,7 @@ and may fail.
 	domain master = no
 

    
 
  • dont descend (S)
-

    There are certain directories on some systems (eg., the /proc tree
+

    There are certain directories on some systems (e.g., the /proc tree
 under Linux) that are either not of interest to clients or are
 infinitely deep (recursive). This parameter allows you to specify a
 comma-delimited list of directories that the server should always show
@@ -1329,7 +1329,7 @@ just "/proc". Experimentation is the best policy :-)
 	dont descend = /proc,/dev
 

    
 
  • dos filetime resolution (S)
-

    Under the DOS and Windows FAT filesystem, the finest granulatity on
+

    Under the DOS and Windows FAT filesystem, the finest granularity on
 time resolution is two seconds. Setting this parameter for a share
 causes Samba to round the reported time down to the nearest two second
 boundary when a query call that requires one second resolution is made
@@ -1355,7 +1355,7 @@ the timestamp on it. Under POSIX semantics, only the owner of the file
 or root may change the timestamp. By default, Samba runs with POSIX
 semantics and refuses to change the timestamp on a file if the user
 smbd is acting on behalf of is not the file owner. Setting this option
-to True allows DOS semantics and smbd will change the file timstamp as
+to True allows DOS semantics and smbd will change the file timestamp as
 DOS requires.
 

    Default:
 	dos filetimes = False
@@ -1435,16 +1435,16 @@ same time you can get data corruption. Use this option carefully!
 particular share. Setting this parameter to "No" prevents any file
 or directory that is a symbolic link from being followed (the user
 will get an error).  This option is very useful to stop users from
-adding a symbolic link to /etc/pasword in their home directory for
+adding a symbolic link to /etc/passwd in their home directory for
 instance.  However it will slow filename lookups down slightly.
-

    This option is enabled (ie. smbd will follow
+

    This option is enabled (i.e. smbd will follow
 symbolic links) by default.
 

    
 
  • force create mode (S)
 

    This parameter specifies a set of UNIX mode bit permissions that will
 *always* be set on a file created by Samba. This is done by
 bitwise 'OR'ing these bits onto the mode bits of a file that is being
-created. The default for this parameter is (in octel) 000. The modes
+created. The default for this parameter is (in octal) 000. The modes
 in this parameter are bitwise 'OR'ed onto the file mode after the mask
 set in the "create mask" parameter is applied.
 

    See also the parameter "create mask" for details
@@ -1461,7 +1461,7 @@ the 'user'.
 

    This parameter specifies a set of UNIX mode bit permissions that will
 *always* be set on a directory created by Samba. This is done by
 bitwise 'OR'ing these bits onto the mode bits of a directory that is
-being created. The default for this parameter is (in octel) 0000 which
+being created. The default for this parameter is (in octal) 0000 which
 will not add any extra permission bits to a created directory. This
 operation is done after the mode mask in the parameter
 "directory mask" is applied.
@@ -1516,7 +1516,7 @@ Windows NT but this can be changed to other strings such as "Samba" or
 	fstype = Samba
 

    
 
  • getwd cache (G)
-

    This is a tuning option. When this is enabled a cacheing algorithm
+

    This is a tuning option. When this is enabled a caching algorithm
 will be used to reduce the time taken for getwd() calls. This can have
 a significant impact on performance, especially when the
 widelinks parameter is set to False.
@@ -1584,8 +1584,8 @@ directories that match.
 

    Each entry in the list must be separated by a '/', which allows
 spaces to be included in the entry.  '*' and '?' can be used
 to specify multiple files or directories as in DOS wildcards.
-

    Each entry must be a unix path, not a DOS path and must not include the 
-unix directory separator '/'.
+

    Each entry must be a Unix path, not a DOS path and must not include the 
+Unix directory separator '/'.
 

    Note that the case sensitivity option is applicable in hiding files.
 

    Setting this parameter will affect the performance of Samba, as it
 will be forced to check all files and directories for a match as they
@@ -1719,7 +1719,7 @@ parameter allows the use of them to be turned on or off.
 

    Kernel oplocks support allows Samba oplocks to be
 broken whenever a local UNIX process or NFS operation accesses a file
 that smbd has oplocked. This allows complete
-data consistancy between SMB/CIFS, NFS and local file access (and is a
+data consistency between SMB/CIFS, NFS and local file access (and is a
 very cool feature :-).
 

    This parameter defaults to "On" on systems that have the support,
 and "off" on systems that don't. You should never need to touch
@@ -1832,7 +1832,7 @@ will be loaded for browsing by default. See the
 "printers" section for more details.
 

    Default:
 	load printers = yes
-

    bg(Example:)
+

    Example:
 	load printers = no
 

    
 
  • local master (G)
@@ -1926,14 +1926,14 @@ preferences and directories to be loaded onto the Windows 95/98
 client.  The share must be writeable when the logs in for the first
 time, in order that the Windows 95/98 client can create the user.dat
 and other directories.
-

    Thereafter, the directories and any of contents can, if required, be
-made read-only.  It is not adviseable that the USER.DAT file be made
+

    Thereafter, the directories and any of the contents can, if required, be
+made read-only.  It is not advisable that the USER.DAT file be made
 read-only - rename it to USER.MAN to achieve the desired effect (a
 MANdatory profile).
 

    Windows clients can sometimes maintain a connection to the [homes]
 share, even though there is no user logged in.  Therefore, it is vital
 that the logon path does not include a reference to the homes share
-(i.e setting this parameter to \\%N\HOMES\profile_path will cause
+(i.e. setting this parameter to \\%N\HOMES\profile_path will cause
 problems).
 

    This option takes the standard substitutions, allowing you to have
 separate logon scripts for each user or machine.
@@ -1956,7 +1956,7 @@ file that will be downloaded is:
 

    /usr/local/samba/netlogon/STARTUP.BAT
 

    The contents of the batch file is entirely your choice.  A suggested
 command would be to add NET TIME \\SERVER /SET /YES, to force every
-machine to synchronise clocks with the same time server.  Another use
+machine to synchronize clocks with the same time server.  Another use
 would be to add NET USE U: \\SERVER\UTILS for commonly used
 utilities, or NET USE Q: \\SERVER\ISO9001_QA for example.
 

    Note that it is particularly important not to allow write access to
@@ -2010,7 +2010,7 @@ the lpq command in use.
 previous identical lpq command will be used if the cached data is
 less than 10 seconds old. A large value may be advisable if your
 lpq command is very slow.
-

    A value of 0 will disable cacheing completely.
+

    A value of 0 will disable caching completely.
 

    See also the "printing" parameter.
 

    Default:
 	lpq cache time = 10
@@ -2087,7 +2087,7 @@ and job number, and deletes the print job.
 periodically a running smbd process will try and
 change the MACHINE ACCOUNT PASWORD stored in the file called
 <Domain>.<Machine>.mac where <Domain> is the name of the
-Domain we are a member of and tt<Machine> is the primary
+Domain we are a member of and <Machine> is the primary
 "NetBIOS name" of the machine
 smbd is running on. This parameter specifies how
 often this password will be changed, in seconds. The default is one
@@ -2135,8 +2135,8 @@ end.
 

    See the section on "NAME MANGLING".
 

    
 
  • mangled map (S)
-

    This is for those who want to directly map UNIX file names which are
-not representable on Windows/DOS.  The mangling of names is not always
+

    This is for those who want to directly map UNIX file names which can
+not be represented on Windows/DOS.  The mangling of names is not always
 what is needed.  In particular you may have documents with file
 extensions that differ between DOS and UNIX. For example, under UNIX
 it is common to use ".html" for HTML files, whereas under
@@ -2144,7 +2144,7 @@ Windows/DOS ".htm" is more commonly used.
 

    So to map "html" to "htm" you would use:
 

      mangled map = (*.html *.htm)
 

    One very useful case is to remove the annoying ";1" off the ends
-of filenames on some CDROMS (only visible under some UNIXes). To do
+of filenames on some CDROMS (only visible under some UNIXs). To do
 this use a map of (*;1 *).
 

    default:
 	no mangled map
@@ -2233,7 +2233,7 @@ becoming executable under UNIX.  This can be quite annoying for shared
 source code, documents, etc...
 

    Note that this requires the "create mask"
 parameter to be set such that owner execute bit is not masked out
-(ie. it must include 100). See the parameter "create
+(i.e. it must include 100). See the parameter "create
 mask" for details.
 

    Default:
       map archive = yes
@@ -2244,7 +2244,7 @@ mask"     for details.
 

    This controls whether DOS style hidden files should be mapped to the
 UNIX world execute bit.
 

    Note that this requires the "create mask" to be
-set such that the world execute bit is not masked out (ie. it must
+set such that the world execute bit is not masked out (i.e. it must
 include 001). See the parameter "create mask"
 for details.
 

    Default:
@@ -2256,7 +2256,7 @@ for details.
 

    This controls whether DOS style system files should be mapped to the
 UNIX group execute bit.
 

    Note that this requires the "create mask" to be
-set such that the group execute bit is not masked out (ie. it must
+set such that the group execute bit is not masked out (i.e. it must
 include 010). See the parameter "create mask"
 for details.
 

    Default:
@@ -2266,7 +2266,7 @@ for details.
 

    
 
  • map to guest (G)
 

    This parameter is only useful in security modes
-other than "security=share" - ie. user,
+other than "security=share" - i.e. user,
 server, and domain.
 

    This parameter can take three different values, which tell
 smbd what to do with user login requests that
@@ -2282,7 +2282,7 @@ account"    .
 

  •  "Bad Password" - Means user logins with an invalid
 password are treated as a guest login and mapped into the
 "guest account". Note that this can
-cause problems as it means that any user mistyping their
+cause problems as it means that any user incorrectly typing their
 password will be silently logged on a "guest" - and 
 will not know the reason they cannot access files they think
 they should - there will have been no message given to them
@@ -2358,7 +2358,7 @@ never need to set this parameter.
 

    This parameter limits the maximum number of open files that one
 smbd file serving process may have open for
 a client at any one time. The default for this parameter is set
-very high (10,000) as Samba uses only one bit per un-opened file.
+very high (10,000) as Samba uses only one bit per unopened file.
 

    The limit of the number of open files is usually set by the
 UNIX per-process file descriptor limit rather than this parameter
 so you should never need to touch this parameter.
@@ -2542,7 +2542,7 @@ system and the Samba server with this option must also be a
 	nis homedir = true
 

    
 
  • nt pipe support (G)
-

    This boolean parameter controlls whether smbd
+

    This boolean parameter controls whether smbd
 will allow Windows NT clients to connect to the NT SMB specific
 IPC$ pipes. This is a developer debugging option and can be left
 alone.
@@ -2550,7 +2550,7 @@ alone.
 	nt pipe support = yes
 

    
 
  • nt smb support (G)
-

    This boolean parameter controlls whether smbd
+

    This boolean parameter controls whether smbd
 will negotiate NT specific SMB support with Windows NT
 clients. Although this is a developer debugging option and should be
 left alone, benchmarking has discovered that Windows NT clients give
@@ -2607,14 +2607,14 @@ of the user.
 
  • oplocks (S)
 

    This boolean option tells smbd whether to issue oplocks (opportunistic
 locks) to file open requests on this share. The oplock code can
-dramatically (approx 30% or more) improve the speed of access to files
-on Samba servers. It allows the clients to agressively cache files
+dramatically (approx. 30% or more) improve the speed of access to files
+on Samba servers. It allows the clients to aggressively cache files
 locally and you may want to disable this option for unreliable network
 environments (it is turned on by default in Windows NT Servers).  For
 more information see the file Speed.txt in the Samba docs/ directory.
 

    Oplocks may be selectively turned off on certain files on a per share basis.
-See the 'veto oplock files' parameter. On some systems oplocks are recognised
-by the underlying operating system. This allows data synchronisation between
+See the 'veto oplock files' parameter. On some systems oplocks are recognized
+by the underlying operating system. This allows data synchronization between
 all access to oplocked files, whether it be via Samba or NFS or a local
 UNIX process. See the kernel oplocks parameter
 for details.
@@ -2645,7 +2645,7 @@ old smb.conf files.
 

    This is a Samba developer option that allows a system command to be
 called when either smbd or
 nmbd crashes. This is usually used to draw
-attention to the fact that a problem occured.
+attention to the fact that a problem occurred.
 

    Default:
 	panic action = <empty string>
 

    
@@ -2710,7 +2710,7 @@ program".
 
  • passwd program (G)
 

    The name of a program that can be used to set UNIX user passwords.
 Any occurrences of %u will be replaced with the
-user name. The user name is checked for existance before calling the
+user name. The user name is checked for existence before calling the
 password changing program.
 

    Also note that many passwd programs insist in "reasonable"
 passwords, such as a minimum length, or the inclusion of mixed case
@@ -2719,7 +2719,7 @@ Windows for Workgroups) uppercase the password before sending it.
 

    Note that if the "unix password sync"
 parameter is set to "True" then this program is called *AS
 ROOT* before the SMB password in the
-smbpassswd file is changed. If this UNIX
+smbpasswd file is changed. If this UNIX
 password change fails, then smbd will fail to
 change the SMB password also (this is by design).
 

    If the "unix password sync" parameter is
@@ -2789,8 +2789,8 @@ better restrict them with hosts allow!
 

    If the "security" parameter is set to
 "domain", then the list of machines in this option must be a list
 of Primary or Backup Domain controllers for the
-Domain, as the Samba server is cryptographically
-in that domain, and will use crpytographically authenticated RPC calls
+Domain, as the Samba server is cryptographicly
+in that domain, and will use cryptographicly authenticated RPC calls
 to authenticate the user logging on. The advantage of using
 "security=domain" is that if you list
 several hosts in the "password server" option then
@@ -2827,7 +2827,7 @@ is to be given access. In the case of printable services, this is
 where print data will spool prior to being submitted to the host for
 printing.
 

    For a printable service offering guest access, the service should be
-readonly and the path should be world-writable and have the sticky bit
+readonly and the path should be world-writeable and have the sticky bit
 set. This is not mandatory of course, but you probably won't get the
 results you expect if you do otherwise.
 

    Any occurrences of %u in the path will be replaced
@@ -2948,11 +2948,11 @@ have its own print command specified.
 

    If there is neither a specified print command for a printable service
 nor a global print command, spool files will be created but not
 processed and (most importantly) not removed.
-

    Note that printing may fail on some UNIXes from the "nobody"
+

    Note that printing may fail on some UNIXs from the "nobody"
 account. If this happens then create an alternative guest account that
 can print and set the "guest account" in the
 "[global]" section.
-

    You can form quite complex print commands by realising that they are
+

    You can form quite complex print commands by realizing that they are
 just passed to a shell. For example the following will log a print
 job, print the file, then remove it. Note that ';' is the usual
 separator for command in shell scripts.
@@ -3144,7 +3144,7 @@ command as the PATH may not be available to the server.
 
  • queueresume command (S)
 

    This parameter specifies the command to be executed on the server host
 in order to resume the printerqueue. It is the command to undo the
-behaviour that is caused by the previous parameter
+behavior that is caused by the previous parameter
 ("queuepause command).
 

    This command should be a program or script which takes a printer name
 as its only parameter and resumes the printerqueue, such that queued
@@ -3182,8 +3182,8 @@ the "invalid users"
 

    
 
  • read only (S)
 

    Note that this is an inverted synonym for
-"writable" and "write ok".
-

    See also "writable" and "write
+"writeable" and "write ok".
+

    See also "writeable" and "write
 ok".
 

    
 
  • read prediction (G)
@@ -3256,7 +3256,7 @@ browse masters if your network config is that stable.
 

    
 
  • remote browse sync (G)
 

    This option allows you to setup nmbd to
-periodically request synchronisation of browse lists with the master
+periodically request synchronization of browse lists with the master
 browser of a samba server that is on a remote segment. This option
 will allow you to gain browse lists for multiple workgroups across
 routed networks. This is done in a manner that does not work with any
@@ -3268,7 +3268,7 @@ send IP packets to.
 

    For example:
 

    	remote browse sync = 192.168.2.255 192.168.4.255
 

    the above line would cause nmbd to request the
-master browser on the specified subnets or addresses to synchronise
+master browser on the specified subnets or addresses to synchronize
 their browse lists with the local server.
 

    The IP addresses you choose would normally be the broadcast addresses
 of the remote networks, but can also be the IP addresses of known
@@ -3304,7 +3304,7 @@ automatic access as the same username.
 

    Synonym for "root directory".
 

    
 
  • root directory (G)
-

    The server will "chroot()" (ie. Change it's root directory) to
+

    The server will "chroot()" (i.e. Change it's root directory) to
 this directory on startup. This is not strictly necessary for secure
 operation. Even without it the server will deny access to files not in
 one of the service entries. It may also check for, and deny access to,
@@ -3335,7 +3335,7 @@ filesystems (such as cdroms) after a connection is closed.
 
  • root preexec (S)
 

    This is the same as the "preexec" parameter except
 that the command is run as root. This is useful for mounting
-filesystems (such as cdroms) before a connection is finalised.
+filesystems (such as cdroms) before a connection is finalized.
 

    See also "preexec".
 

    
 
  • security (G)
@@ -3356,7 +3356,7 @@ PREVIOUS VERSIONS OF SAMBA *******.
 

    In previous versions of Samba the default was
 "security=share" mainly because that was
 the only option at one stage.
-

    There is a bug in WfWg that has relevence to this setting. When in
+

    There is a bug in WfWg that has relevance to this setting. When in
 user or server level security a WfWg client will totally ignore the
 password you type in the "connect drive" dialog box. This makes it
 very difficult (if not impossible) to connect to a Samba service as
@@ -3371,7 +3371,7 @@ shares). This is commonly used for a shared printer server. It is more
 difficult to setup guest shares with
 security=user, see the "map to
 guest"parameter for details.
-

    It is possible to use smbd in a "hybred
+

    It is possible to use smbd in a "hybrid
 mode" where it is offers both user and share level security under
 different NetBIOS aliases. See the
 NetBIOS aliases and the
@@ -3436,7 +3436,7 @@ be used in this security mode. Parameters such as
 are then applied and may change the UNIX user to use on this
 connection, but only after the user has been successfully
 authenticated.
-

    Note that the the name of the resource being requested is
+

    Note that the name of the resource being requested is
 *not* sent to the server until after the server has successfully
 authenticated the client. This is why guest shares don't work in user
 level security without allowing the server to automatically map unknown
@@ -3458,7 +3458,7 @@ directory ENCRYPTION.txt for details on how to set this up.
 the same as "security=user". It only
 affects how the server deals with the authentication, it does not in
 any way affect what the client sees.
-

    Note that the the name of the resource being requested is
+

    Note that the name of the resource being requested is
 *not* sent to the server until after the server has successfully
 authenticated the client. This is why guest shares don't work in server
 level security without allowing the server to automatically map unknown
@@ -3485,7 +3485,7 @@ UNIX account to map file access to.
 the same as "security=user". It only
 affects how the server deals with the authentication, it does not in
 any way affect what the client sees.
-

    Note that the the name of the resource being requested is
+

    Note that the name of the resource being requested is
 *not* sent to the server until after the server has successfully
 authenticated the client. This is why guest shares don't work in domain
 level security without allowing the server to automatically map unknown
@@ -3497,7 +3497,7 @@ doing this.
 set usernames. The communication with a Domain Controller
 must be done in UNICODE and Samba currently does not widen
 multi-byte user names to UNICODE correctly, thus a multi-byte
-username will not be recognised correctly at the Domain Controller.
+username will not be recognized correctly at the Domain Controller.
 This issue will be addressed in a future release.
 

    See also the section "NOTE ABOUT USERNAME/PASSWORD
 VALIDATION".
@@ -3533,7 +3533,7 @@ client. See the Pathworks documentation for details.
  	set directory = yes
 

    
 
  • share modes (S)
-

    This enables or disables the honouring of the "share modes" during a
+

    This enables or disables the honoring of the "share modes" during a
 file open. These modes are used by clients to gain exclusive read or
 write access to a file.
 

    These open modes are not directly supported by UNIX, so they are
@@ -3611,9 +3611,9 @@ experiment and choose them yourself. We strongly suggest you read the
 appropriate documentation for your operating system first (perhaps
 "man setsockopt" will help).
 

    You may find that on some systems Samba will say "Unknown socket
-option" when you supply an option. This means you either mis-typed it
-or you need to add an include file to includes.h for your OS. If the
-latter is the case please send the patch to
+option" when you supply an option. This means you either incorrectly 
+typed it or you need to add an include file to includes.h for your OS. 
+If the latter is the case please send the patch to
 samba-bugs@samba.anu.edu.au.
 

    Any of the supported socket options may be combined in any way you
 like, as long as your OS allows it.
@@ -3673,7 +3673,7 @@ option "--with-ssl" was given at configure time.
 

    Note that for export control reasons this code is **NOT**
 enabled by default in any current binary version of Samba.
 

    This variable defines where to look up the Certification
-Autorities. The given directory should contain one file for each CA
+Authorities. The given directory should contain one file for each CA
 that samba will trust.  The file name must be the hash value over the
 "Distinguished Name" of the CA. How this directory is set up is
 explained later in this document. All files within the directory that
@@ -3692,7 +3692,7 @@ enabled by default in any current binary version of Samba.
 certificates of the trusted CAs are collected in one big file and this
 variable points to the file. You will probably only use one of the two
 ways to define your CAs. The first choice is preferable if you have
-many CAs or want to be flexible, the second is perferable if you only
+many CAs or want to be flexible, the second is preferable if you only
 have one CA and want to keep things simple (you won't need to create
 the hashed file names). You don't need this variable if you don't
 verify client certificates.
@@ -3868,7 +3868,7 @@ change this parameter.
 

    Default:
 	status = yes
 

    
-dir(strict locking (S))
+
  • strict locking (S)
 

    This is a boolean that controls the handling of file locking in the
 server. When this is set to "yes" the server will check every read and
 write access for file locks, and deny access if locks exist. This can
@@ -3888,7 +3888,7 @@ preferable.
 seem to confuse flushing buffer contents to disk with doing a sync to
 disk. Under UNIX, a sync call forces the process to be suspended until
 the kernel has ensured that all outstanding data in kernel disk
-buffers has been safely stored onto stable storate. This is very slow
+buffers has been safely stored onto stable storage. This is very slow
 and should only be done rarely. Setting this parameter to "no" (the
 default) means that smbd ignores the Windows applications requests for
 a sync call. There is only a possibility of losing data if the
@@ -3923,16 +3923,16 @@ set to "yes" in order for this parameter to have any affect.
 

    See also the "strict sync" parameter.
 

    Default:
 	sync always = no
-

    xample:
+

    Example:
 	sync always = yes
 

    
 
  • syslog (G)
 

    This parameter maps how Samba debug messages are logged onto the
 system syslog logging levels. Samba debug level zero maps onto syslog
 LOG_ERR, debug level one maps onto LOG_WARNING, debug level two maps
-to LOG_NOTICE, debug level three maps onto LOG_INFO.  The paramter
+to LOG_NOTICE, debug level three maps onto LOG_INFO.  The parameter
 sets the threshold for doing the mapping, all Samba debug messages
-above this threashold are mapped to syslog LOG_DEBUG messages.
+above this threshold are mapped to syslog LOG_DEBUG messages.
 

    Default:
 	syslog = 1
 

    
@@ -3969,7 +3969,7 @@ parameter allows the timestamping to be turned off.
 	timestamp logs = False
 

    
 
  • unix password sync (G)
-

    This boolean parameter controlls whether Samba attempts to synchronise
+

    This boolean parameter controls whether Samba attempts to synchronize
 the UNIX password with the SMB password when the encrypted SMB
 password in the smbpasswd file is changed. If this is set to true the
 program specified in the "passwd program"
@@ -4095,7 +4095,7 @@ as many DOS clients send an all-uppercase username. By default Samba
 tries all lowercase, followed by the username with the first letter
 capitalized, and fails if the username is not found on the UNIX
 machine.
-

    If this parameter is set to non-zero the behaviour changes. This
+

    If this parameter is set to non-zero the behavior changes. This
 parameter is a number that specifies the number of uppercase
 combinations to try whilst trying to determine the UNIX user name. The
 higher the number the more combinations will be tried, but the slower
@@ -4107,7 +4107,7 @@ strange usernames on your UNIX machine, such as "AstrangeUser".
 	username level = 5
 

    
 
  • username map (G)
-

    This option allows you to to specify a file containing a mapping of
+

    This option allows you to specify a file containing a mapping of
 usernames from the clients to the server. This can be used for several
 purposes. The most common is to map usernames that users use on DOS or
 Windows machines to those that the UNIX box uses. The other is to map
@@ -4206,13 +4206,13 @@ overwritten.
 
     
 	Samba defaults to using a reasonable set of valid characters
-	for english systems
+	for English systems
 
 
    
 
 

    Example
 	valid chars = 0345:0305 0366:0326 0344:0304
-

    The above example allows filenames to have the swedish characters in
+

    The above example allows filenames to have the Swedish characters in
 them.
 

    NOTE: It is actually quite difficult to correctly produce a "valid
 chars" line for a particular system. To automate the process
@@ -4354,32 +4354,16 @@ network.
 

    
 
  • workgroup (G)
 

    This controls what workgroup your server will appear to be in when
-queried by clients. Note that this parameter also controlls the Domain
+queried by clients. Note that this parameter also controls the Domain
 name used with the "security=domain"
 setting.
 

    Default:
  	set at compile time to WORKGROUP
-

    .B Example:
+

    Example:
  	workgroup = MYGROUP
 

    
 
  • writable (S)
-

    An inverted synonym is "read only".
-

    If this parameter is "no", then users of a service may not create
-or modify files in the service's directory.
-

    Note that a printable service ("printable = yes")
-will *ALWAYS* allow writing to the directory (user privileges
-permitting), but only via spooling operations.
-

    Default:
- 	writable = no
-

    Examples:
-
    -
- 	read only = no
- 	writable = yes
- 	write ok = yes
-
-
    
-
+

    Synonym for "writeable" for people who can't spell :-).
 

    
 
  • write list (S)
 

    This is a list of users that are given read-write access to a
@@ -4396,7 +4380,7 @@ they will be given write access.
 	write list = admin, root, @staff
 

    
 
  • write ok (S)
-

    Synonym for writable.
+

    Synonym for writeable.
 

    
 
  • write raw (G)
 

    This parameter controls whether or not the server will support raw
@@ -4406,7 +4390,23 @@ need to change this parameter.
  	write raw = yes
 

    
 
  • writeable
-

    Synonym for "writable" for people who can't spell :-).
+

    An inverted synonym is "read only".
+

    If this parameter is "no", then users of a service may not create
+or modify files in the service's directory.
+

    Note that a printable service ("printable = yes")
+will *ALWAYS* allow writing to the directory (user privileges
+permitting), but only via spooling operations.
+

    Default:
+ 	writeable = no
+

    Examples:
+
    +
+ 	read only = no
+ 	writeable = yes
+ 	write ok = yes
+
+
    
+
 

    
 
    WARNINGS